src code
String#unfilterJSON([filter = Prototype.JSONFilter]) → String
Strips comment delimiters around Ajax JSON or JavaScript responses. This security method is called internally.